Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
File: JHvwudcpiha5hv1pVPCkRfLiEDw.mft (raw, json)
Hash identifier: LMIj7eFzItmu19cTEhV4ifhiz8EPR52zurtYmo/sM5A=
Subject key identifier: 4D:B4:FA:70:D5:97:B9:B0:4F:34:5D:B3:3A:71:9F:EC:59:3D:BB:55
Authority key identifier: 24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C
Certificate issuer: /CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c
Certificate serial: 019D28BB6F44562581476D48F1C1C75BDD2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 06:01:05 +0000
Manifest this update: Thu 26 Mar 2026 06:01:05 +0000
Manifest next update: Fri 27 Mar 2026 06:01:05 +0000
Files and hashes: 1: JHvwudcpiha5hv1pVPCkRfLiEDw.crl (hash: kmWhgGXYA5S/eg5Ei5a4ni24saRQgTj+eSfEOLQNozk=)
2: m0Ovx0Sqw4Mvmnjc_rT54ARItq0.roa (hash: nkxhqGEnqwsqr1mf5UgG9VF9xVU0Wk8zI/Hwu2iNPWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:6f:44:56:25:81:47:6d:48:f1:c1:c7:5b:dd:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c
Validity
Not Before: Mar 26 06:01:05 2026 GMT
Not After : Mar 27 06:01:05 2026 GMT
Subject: CN=4db4fa70d597b9b04f345db33a719fec593dbb55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cf:98:64:3f:c1:97:08:64:27:0c:5f:49:5d:
43:67:d7:f0:7e:13:6d:ef:37:3b:4a:0f:8b:f7:72:
2c:d5:bd:cb:c6:00:39:39:16:2f:b7:25:40:b2:07:
bc:30:4f:46:ed:58:29:71:2a:cd:b6:a7:76:a7:06:
e3:7c:b8:78:f4:09:b4:a0:16:29:81:70:72:b7:c5:
d6:61:06:3b:d1:7d:fe:92:bc:c4:1c:a1:45:d8:dc:
6d:23:ab:f7:0c:b0:26:82:9c:96:70:87:6b:8d:b4:
8b:38:5a:0d:81:ff:0e:58:a0:ed:a9:9b:e3:77:d9:
25:3e:b9:51:c4:be:8d:62:a2:8a:7c:83:73:db:04:
99:cd:91:1d:0c:ad:60:58:7c:7b:7a:7d:36:87:8d:
bf:c3:f6:c5:e9:c9:97:c9:83:c9:0e:86:74:94:3d:
9f:26:c4:44:be:1a:b3:da:c8:b7:29:60:d8:de:b6:
81:0c:f0:29:de:9d:db:99:81:fc:cd:7f:55:b4:b8:
0f:71:10:fe:d1:47:2c:f8:a0:9f:05:aa:9c:2e:26:
38:05:59:70:9f:9e:76:36:6f:30:89:9b:ea:54:15:
03:bd:c3:97:0a:bc:f0:bb:42:4d:b0:83:f4:cb:29:
85:51:85:e4:57:a0:fd:d1:ec:47:a7:83:5a:4a:1f:
28:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B4:FA:70:D5:97:B9:B0:4F:34:5D:B3:3A:71:9F:EC:59:3D:BB:55
X509v3 Authority Key Identifier:
keyid:24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:1d:12:0c:cb:e2:fc:6d:37:64:ed:16:6d:52:71:7b:83:4a:
52:a3:49:64:1a:b4:b1:ba:a7:ad:63:c4:2e:6b:10:52:c7:fd:
95:ac:ac:c3:2a:1a:23:90:2b:6c:bd:0c:aa:12:1c:4f:46:c7:
48:b7:be:0f:da:d5:36:58:52:e3:bf:4b:a4:14:99:df:a0:56:
17:69:48:ad:36:0e:85:ac:eb:5b:f4:cf:56:be:dc:90:a9:ca:
65:a6:31:98:f7:4a:3f:43:40:4c:70:cd:e0:84:3f:cc:ac:2f:
e2:f4:6a:e4:fe:9b:33:de:ff:4f:5d:67:dd:d1:ea:3c:d4:36:
ed:0f:c2:8c:7c:13:54:90:7a:fd:a7:18:84:6b:d9:92:c1:d4:
c9:dd:92:4c:66:1d:6e:0d:1d:7b:09:6c:18:e3:b3:19:c6:01:
79:e0:4b:8a:40:4a:0c:36:4c:80:f4:9c:c3:ac:fb:57:49:77:
8e:ce:98:b5:92:74:ab:ba:ab:e1:90:97:62:14:12:3c:a3:1f:
18:cb:f9:f1:55:6c:af:69:f2:75:6f:1f:33:fb:9d:91:b7:03:
3b:c5:f1:fd:13:0f:f1:6e:7e:b5:8f:a8:32:fe:e4:47:78:0b:
5a:7b:bb:07:8a:f2:7b:13:85:b6:34:be:f2:a9:19:be:fd:05:
87:24:27:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:58 2026 by rpki-client